Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-5169 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T05:26:46.981Z Vendors: Mozilla Products: Firefox Problem Types: Dragging and dropping link text onto home button can set home page to include chrome pages Description: If manipulated hyperlinked text with "chrome:" URL contained in it is dragged and dropped on the "home" icon, the home page can be reset to include a normally-unlinkable chrome page as one of the home page tabs. This vulnerability affects Firefox < 60. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2018-11/ - http://www.securitytracker.com/id/1040896 - https://usn.ubun
https://www.mozilla.org/security/advisories/mfsa2018-11/ - http://www.securitytracker.com/id/1040896 - https://usn.ubuntu.com/3645-1/ - http://www.securityfocus.com/bid/104139 - https://bugzilla.mozilla.org/show_bug.cgi?id=1319157
CVE ID: CVE-2018-5170 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T05:26:47.040Z Vendors: Mozilla Products: Thunderbird ESR, Thunderbird Problem Types: Filename spoofing for external attachments Description: It is possible to spoof the filename of an attachment and display an arbitrary attachment name. This could lead to a user opening a remote attachment which is a different file type than expected. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 52.8. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:1726 - https://bugzilla.mozilla.org/show_bug.cgi?id=1411732 - https://security.gentoo.
ccess.redhat.com/errata/RHSA-2018:1726 - https://bugzilla.mozilla.org/show_bug.cgi?id=1411732 - https://security.gentoo.org/glsa/201811-13 - https://www.mozilla.org/security/advisories/mfsa2018-13/ - https://usn.ubuntu.com/3660-1/ - http://www.securitytracker.com/id/1040946 - https://lists.debian.org/debian-lts-announce/2018/05/msg00013.html - https://access.redhat.com/errata/RHSA-2018:1725 - https://www.debian.org/security/2018/dsa-4209
CVE ID: CVE-2018-5172 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T05:26:46.957Z Vendors: Mozilla Products: Firefox Problem Types: Pasted script from clipboard can run in the Live Bookmarks page or PDF viewer Description: The Live Bookmarks page and the PDF viewer can run injected script content if a user pastes script from the clipboard into them while viewing RSS feeds or PDF files. This could allow a malicious site to socially engineer a user to copy and paste malicious script content that could then run with the context of either page but does not allow for privilege escalation. This vulnerability affects Firefox < 60. Additional Analyst Notes: - CVE Program C
s not allow for privilege escalation. This vulnerability affects Firefox < 60. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2018-11/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1436482 - http://www.securitytracker.com/id/1040896 - https://usn.ubuntu.com/3645-1/ - http://www.securityfocus.com/bid/104139
CVE ID: CVE-2018-5173 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T05:26:46.982Z Vendors: Mozilla Products: Firefox Problem Types: File name spoofing of Downloads panel with Unicode characters Description: The filename appearing in the "Downloads" panel improperly renders some Unicode characters, allowing for the file name to be spoofed. This can be used to obscure the file extension of potentially executable files from user view in the panel. Note: the dialog to open the file will show the full, correct filename and whether it is executable or not. This vulnerability affects Firefox < 60. Additional Analyst Notes: - CVE Program Container: References: - https://ww
ot. This vulnerability affects Firefox < 60. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2018-11/ - http://www.securitytracker.com/id/1040896 - https://usn.ubuntu.com/3645-1/ - http://www.securityfocus.com/bid/104139 - https://bugzilla.mozilla.org/show_bug.cgi?id=1438025
CVE ID: CVE-2018-5174 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T05:26:47.099Z Vendors: Mozilla Products: Thunderbird, Thunderbird ESR, Firefox, Firefox ESR Problem Types: Windows Defender SmartScreen UI runs with less secure behavior for downloaded files in Windows 10 April 2018 Update Description: In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEE_MASK_FLAG_NO_UI" flag associated with downloaded files and will not show any UI. Files that are unknown and potentially dangerous will be allowed to run because SmartScreen will not prompt the user for a decision, and if the user is offline all files will be allowed to be opened because
creen will not prompt the user for a decision, and if the user is offline all files will be allowed to be opened because Windows won't prompt the user to ask what to do. Firefox incorrectly sets this flag when downloading files, leading to less secure behavior from SmartScreen. Note: this issue only affects Windows 10 users running the April 2018 update or later. It does not affect other Windows users or other operating systems. This vulnerability affects Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox < 60, and Firefox ESR < 52.8. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1447080 - https://www.mozilla.org/security/advis
m Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1447080 - https://www.mozilla.org/security/advisories/mfsa2018-13/ - https://www.mozilla.org/security/advisories/mfsa2018-11/ - http://www.securitytracker.com/id/1040896 - https://www.mozilla.org/security/advisories/mfsa2018-12/ - http://www.securityfocus.com/bid/104136
CVE ID: CVE-2018-5175 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T05:26:47.000Z Vendors: Mozilla Products: Firefox Problem Types: Universal CSP bypass on sites using strict-dynamic in their policies Description: A mechanism to bypass Content Security Policy (CSP) protections on sites that have a "script-src" policy of "'strict-dynamic'". If a target website contains an HTML injection flaw an attacker could inject a reference to a copy of the "require.js" library that is part of Firefox's Developer Tools, and then use a known technique using that library to bypass the CSP restrictions on executing injected scripts. This vulnerability affects Firefox < 60. Addition
library to bypass the CSP restrictions on executing injected scripts. This vulnerability affects Firefox < 60. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2018-11/ - http://www.securitytracker.com/id/1040896 - https://bugzilla.mozilla.org/show_bug.cgi?id=1432358 - https://usn.ubuntu.com/3645-1/ - http://www.securityfocus.com/bid/104139
CVE ID: CVE-2018-5176 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T05:26:46.989Z Vendors: Mozilla Products: Firefox Problem Types: JSON Viewer script injection Description: The JSON Viewer displays clickable hyperlinks for strings that are parseable as URLs, including "javascript:" links. If a JSON file contains malicious JavaScript script embedded as "javascript:" links, users may be tricked into clicking and running this code in the context of the JSON Viewer. This can allow for the theft of cookies and authorization tokens which are accessible to that context. This vulnerability affects Firefox < 60. Additional Analyst Notes: - CVE Program Container: References
to that context. This vulnerability affects Firefox < 60. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2018-11/ - http://www.securitytracker.com/id/1040896 - https://usn.ubuntu.com/3645-1/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1442840 - http://www.securityfocus.com/bid/104139
CVE ID: CVE-2018-5177 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T05:26:46.996Z Vendors: Mozilla Products: Firefox Problem Types: Buffer overflow in XSLT during number formatting Description: A vulnerability exists in XSLT during number formatting where a negative buffer size may be allocated in some instances, leading to a buffer overflow and crash if it occurs. This vulnerability affects Firefox < 60. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2018-11/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1451908 - http://www.securitytracker.com/id/1040896 - https://usn.ubuntu.com/3645-1/ - http://w
illa.org/show_bug.cgi?id=1451908 - http://www.securitytracker.com/id/1040896 - https://usn.ubuntu.com/3645-1/ - http://www.securityfocus.com/bid/104139
CVE ID: CVE-2018-5178 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T05:26:46.980Z Vendors: Mozilla Products: Thunderbird ESR, Thunderbird, Firefox ESR Problem Types: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension Description: A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data. This vulnerability requires the use of a malicious or vulnerable legacy extension in order to occur. This vulnerability affects Thunderbird ESR < 52.8, Thunderbird < 52.8, and Firefox ESR < 52.8. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com
52.8, and Firefox ESR < 52.8. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:1415 - https://security.gentoo.org/glsa/201810-01 - https://access.redhat.com/errata/RHSA-2018:1726 - https://access.redhat.com/errata/RHSA-2018:1414 - https://security.gentoo.org/glsa/201811-13 - https://www.mozilla.org/security/advisories/mfsa2018-13/ - https://usn.ubuntu.com/3660-1/ - http://www.securitytracker.com/id/1040898 - https://www.debian.org/security/2018/dsa-4199 - https://lists.debian.org/debian-lts-announce/2018/05/msg00013.html - https://lists.debian.org/debian-lts-announce/2018/05/msg00007.html - https://access.redhat.com/errata/RHSA-2018:
.html - https://lists.debian.org/debian-lts-announce/2018/05/msg00007.html - https://access.redhat.com/errata/RHSA-2018:1725 - http://www.securityfocus.com/bid/104138 - https://www.debian.org/security/2018/dsa-4209 - https://www.mozilla.org/security/advisories/mfsa2018-12/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1443891
CVE ID: CVE-2018-5179 State: PUBLISHED Published: 2019-04-26T13:55:13 Last Updated: 2024-08-05T05:26:46.996Z Vendors: n/a Products: Firefox Problem Types: Covert Channel Description: A service worker can send the activate event on itself periodically which allows it to run perpetually, allowing it to monitor activity by users. Affects all versions prior to Firefox 60. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/en-US/security/advisories/mfsa2018-11/
CVE ID: CVE-2018-5180 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T05:26:47.098Z Vendors: Mozilla Products: Firefox Problem Types: heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced Description: A use-after-free vulnerability can occur during WebGL operations. While this results in a potentially exploitable crash, the vulnerability is limited because the memory is freed and reused in a brief window of time during the freeing of the same callstack. This vulnerability affects Firefox < 60. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2018-11/ - http://www.securitytracker.com/id/1040
ntainer: References: - https://www.mozilla.org/security/advisories/mfsa2018-11/ - http://www.securitytracker.com/id/1040896 - https://usn.ubuntu.com/3645-1/ - http://www.securityfocus.com/bid/104139 - https://bugzilla.mozilla.org/show_bug.cgi?id=1444086
CVE ID: CVE-2018-5181 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T05:26:47.013Z Vendors: Mozilla Products: Firefox Problem Types: Local file can be displayed in noopener tab through drag and drop of hyperlink Description: If a URL using the "file:" protocol is dragged and dropped onto an open tab that is running in a different child process the tab will open a local file corresponding to the dropped URL, contrary to policy. One way to make the target tab open more reliably in a separate process is to open it with the "noopener" keyword. This vulnerability affects Firefox < 60. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.or
nerability affects Firefox < 60. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2018-11/ - http://www.securitytracker.com/id/1040896 - https://usn.ubuntu.com/3645-1/ - http://www.securityfocus.com/bid/104139 - https://bugzilla.mozilla.org/show_bug.cgi?id=1424107
CVE ID: CVE-2018-5182 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T05:26:47.148Z Vendors: Mozilla Products: Firefox Problem Types: Local file can be displayed from hyperlink dragged and dropped on addressbar Description: If a text string that happens to be a filename in the operating system's native format is dragged and dropped onto the addressbar the specified local file will be opened. This is contrary to policy and is what would happen if the string were the equivalent "file:" URL. This vulnerability affects Firefox < 60. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2018-11/ - http://www.secur
otes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2018-11/ - http://www.securitytracker.com/id/1040896 - https://usn.ubuntu.com/3645-1/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1435908 - http://www.securityfocus.com/bid/104139
CVE ID: CVE-2018-5183 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T05:26:47.203Z Vendors: Mozilla Products: Thunderbird ESR, Thunderbird, Firefox ESR Problem Types: Backport critical security fixes in Skia Description: Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues including invalid buffer reads and writes during graphic operations. This vulnerability affects Thunderbird ESR < 52.8, Thunderbird < 52.8, and Firefox ESR < 52.8. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:1415 - https://security.gentoo.org/glsa/201810-01 - https://access
erences: - https://access.redhat.com/errata/RHSA-2018:1415 - https://security.gentoo.org/glsa/201810-01 - https://access.redhat.com/errata/RHSA-2018:1726 - https://access.redhat.com/errata/RHSA-2018:1414 - https://bugzilla.mozilla.org/show_bug.cgi?id=1454692 - https://security.gentoo.org/glsa/201811-13 - https://www.mozilla.org/security/advisories/mfsa2018-13/ - https://usn.ubuntu.com/3660-1/ - http://www.securitytracker.com/id/1040898 - https://www.debian.org/security/2018/dsa-4199 - https://lists.debian.org/debian-lts-announce/2018/05/msg00013.html - https://lists.debian.org/debian-lts-announce/2018/05/msg00007.html - https://access.redhat.com/errata/RHSA-2018:1725 - http://www.securityfoc
org/debian-lts-announce/2018/05/msg00007.html - https://access.redhat.com/errata/RHSA-2018:1725 - http://www.securityfocus.com/bid/104138 - https://www.debian.org/security/2018/dsa-4209 - https://www.mozilla.org/security/advisories/mfsa2018-12/
CVE ID: CVE-2018-5184 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T05:26:47.204Z Vendors: Mozilla Products: Thunderbird ESR, Thunderbird Problem Types: Full plaintext recovery in S/MIME via chosen-ciphertext attack Description: Using remote content in encrypted messages can lead to the disclosure of plaintext. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 52.8. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:1726 - https://security.gentoo.org/glsa/201811-13 - https://www.mozilla.org/security/advisories/mfsa2018-13/ - https://usn.ubuntu.com/3660-1/ - http://www.securitytracker.com/id/
//www.mozilla.org/security/advisories/mfsa2018-13/ - https://usn.ubuntu.com/3660-1/ - http://www.securitytracker.com/id/1040946 - https://lists.debian.org/debian-lts-announce/2018/05/msg00013.html - https://access.redhat.com/errata/RHSA-2018:1725 - https://www.debian.org/security/2018/dsa-4209 - https://bugzilla.mozilla.org/show_bug.cgi?id=1411592 - http://www.securityfocus.com/bid/104240
CVE ID: CVE-2018-5185 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T05:26:46.969Z Vendors: Mozilla Products: Thunderbird ESR, Thunderbird Problem Types: Leaking plaintext through HTML forms Description: Plaintext of decrypted emails can leak through by user submitting an embedded form. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 52.8. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:1726 - https://security.gentoo.org/glsa/201811-13 - https://www.mozilla.org/security/advisories/mfsa2018-13/ - https://usn.ubuntu.com/3660-1/ - http://www.securitytracker.com/id/1040946 - https://lists.de
/advisories/mfsa2018-13/ - https://usn.ubuntu.com/3660-1/ - http://www.securitytracker.com/id/1040946 - https://lists.debian.org/debian-lts-announce/2018/05/msg00013.html - https://access.redhat.com/errata/RHSA-2018:1725 - https://bugzilla.mozilla.org/show_bug.cgi?id=1450345 - https://www.debian.org/security/2018/dsa-4209 - http://www.securityfocus.com/bid/104240
CVE ID: CVE-2018-5186 State: PUBLISHED Published: 2018-10-18T13:00:00 Last Updated: 2024-08-05T05:26:47.205Z Vendors: Mozilla Products: Firefox Problem Types: Memory safety bugs fixed in Firefox 61 Description: Memory safety bugs present in Firefox 60. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 61. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201810-01 - https://www.mozilla.org/security/advisories/mfsa2018-15/ - http://www.securityfocus.com/bid/104557 - http://www.securitytracker.com/id/10411
org/security/advisories/mfsa2018-15/ - http://www.securityfocus.com/bid/104557 - http://www.securitytracker.com/id/1041193 - https://usn.ubuntu.com/3705-1/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1464872%2C1463329%2C1419373%2C1412882%2C1413033%2C1444673%2C1454448%2C1453505%2C1438671
CVE ID: CVE-2018-5187 State: PUBLISHED Published: 2018-10-18T13:00:00 Last Updated: 2024-08-05T05:26:47.047Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and Thunderbird 60 Description: Memory safety bugs present in Firefox 60 and Firefox ESR 60. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 60, Firefox ESR < 60.1, and Firefox < 61. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201810-01 - https://www.moz
ional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201810-01 - https://www.mozilla.org/security/advisories/mfsa2018-15/ - https://lists.debian.org/debian-lts-announce/2018/11/msg00011.html - https://security.gentoo.org/glsa/201811-13 - https://www.debian.org/security/2018/dsa-4295 - https://www.mozilla.org/security/advisories/mfsa2018-16/ - https://www.mozilla.org/security/advisories/mfsa2018-19/ - http://www.securityfocus.com/bid/104556 - https://usn.ubuntu.com/3705-1/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1461324%2C1414829%2C1395246%2C1467938%2C1461619%2C1425930%2C1438556%2C1454285%2C1459568%2C1463884
CVE ID: CVE-2018-5188 State: PUBLISHED Published: 2018-10-18T13:00:00 Last Updated: 2024-08-05T05:26:46.950Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox ESR 52.9, and Thunderbird 60 Description: Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61. Additional Analyst Notes: - CVE Program Containe
rbird < 52.9, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201810-01 - http://www.securityfocus.com/bid/104555 - https://www.mozilla.org/security/advisories/mfsa2018-15/ - https://access.redhat.com/errata/RHSA-2018:2112 - https://usn.ubuntu.com/3749-1/ - https://security.gentoo.org/glsa/201811-13 - https://www.mozilla.org/security/advisories/mfsa2018-18/ - https://access.redhat.com/errata/RHSA-2018:2113 - https://www.mozilla.org/security/advisories/mfsa2018-16/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1456189%2C1456975%2C1465898%2C1392739%2C1451297%2C1464063%2C1437842%2C144
ttps://bugzilla.mozilla.org/buglist.cgi?bug_id=1456189%2C1456975%2C1465898%2C1392739%2C1451297%2C1464063%2C1437842%2C1442722%2C1452576%2C1450688%2C1458264%2C1458270%2C1465108%2C1464829%2C1464079%2C1463494%2C1458048 - https://www.debian.org/security/2018/dsa-4244 - https://www.mozilla.org/security/advisories/mfsa2018-19/ - https://access.redhat.com/errata/RHSA-2018:2252 - https://www.mozilla.org/security/advisories/mfsa2018-17/ - https://lists.debian.org/debian-lts-announce/2018/07/msg00013.html - https://access.redhat.com/errata/RHSA-2018:2251 - https://usn.ubuntu.com/3705-1/ - https://usn.ubuntu.com/3714-1/ - https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html
CVE ID: CVE-2018-5189 State: PUBLISHED Published: 2018-01-11T16:00:00 Last Updated: 2024-08-05T05:26:47.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in Jungo Windriver 12.5.1 allows local users to cause a denial of service (buffer overflow) or gain system privileges by flipping pool buffer size, aka a "double fetch" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.fidusinfosec.com/jungo-windriver-code-execution-cve-2018-5189/ - https://www.exploit-db.com/exploits/43494/
CVE ID: CVE-2018-5190 State: PUBLISHED Published: 2018-04-17T13:00:00 Last Updated: 2024-08-05T05:26:46.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: PicturesPro Photo Cart 6 and 7 before Security-Patch-2018-B allows remote attackers to access arbitrary customer accounts via a modified cookie, related to pc_head.php, pc_login.php, and pc_login_page.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.picturespro.com/support-forum/photo-cart/?t=38346-security-patch-for-photo-cart-2018 - https://brianmccarthytech.blogspot.co.nz/2018/04/cve-2018-5190.html
CVE ID: CVE-2018-5191 State: REJECTED Published: 2018-01-03T21:00:00 Last Updated: 2018-01-04T15:57:01 Description: No description available.
CVE ID: CVE-2018-5195 State: PUBLISHED Published: 2018-01-17T17:00:00Z Last Updated: 2024-09-17T00:36:29.253Z Vendors: Hancom Products: Hancom office Hword NEO Problem Types: buffer Overflow Description: Hancom NEO versions 9.6.1.5183 and earlier have a buffer Overflow vulnerability that leads remote attackers to execute arbitrary commands when performing the hyperlink Attributes in document. Additional Analyst Notes: - CVE Program Container: References: - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=26983 - http://help.hancom.com/cve/hoffice/en-US/CVE_en_050_01.htm