Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-5274 State: PUBLISHED Published: 2018-01-08T05:00:00 Last Updated: 2024-08-05T05:33:43.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C40E024. NOTE: the vendor reported that they "have not been able to reproduce the issue on any Windows operating system version (32-bit or 64-bit). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Malwarebytes_POC/tree/master/0x9C40E024
CVE ID: CVE-2018-5275 State: PUBLISHED Published: 2018-01-08T05:00:00 Last Updated: 2024-08-05T05:33:44.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C40E020. NOTE: the vendor reported that they "have not been able to reproduce the issue on any Windows operating system version (32-bit or 64-bit). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Malwarebytes_POC/tree/master/0x9C40E020
CVE ID: CVE-2018-5276 State: PUBLISHED Published: 2018-01-08T05:00:00 Last Updated: 2024-08-05T05:33:44.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e018. NOTE: the vendor reported that they "have not been able to reproduce the issue on any Windows operating system version (32-bit or 64-bit). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Malwarebytes_POC/tree/master/0x
: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Malwarebytes_POC/tree/master/0x9c40e018
CVE ID: CVE-2018-5277 State: PUBLISHED Published: 2018-01-08T05:00:00 Last Updated: 2024-11-14T20:54:22.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e000. NOTE: the vendor reported that they "have not been able to reproduce the issue on any Windows operating system version (32-bit or 64-bit). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Malwarebytes_POC/tree/master/0x
: - CISA ADP Vulnrichment: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Malwarebytes_POC/tree/master/0x9c40e000
CVE ID: CVE-2018-5278 State: PUBLISHED Published: 2018-01-08T05:00:00 Last Updated: 2024-08-05T05:33:43.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e00c. NOTE: the vendor reported that they "have not been able to reproduce the issue on any Windows operating system version (32-bit or 64-bit). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Malwarebytes_POC/tree/master/0x
: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Malwarebytes_POC/tree/master/0x9c40e00c
CVE ID: CVE-2018-5279 State: PUBLISHED Published: 2018-01-08T05:00:00 Last Updated: 2024-08-05T05:33:44.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e02c. NOTE: the vendor reported that they "have not been able to reproduce the issue on any Windows operating system version (32-bit or 64-bit). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Malwarebytes_POC/tree/master/0x
: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Malwarebytes_POC/tree/master/0x9c40e02c - http://www.securityfocus.com/bid/102453
CVE ID: CVE-2018-5280 State: PUBLISHED Published: 2018-01-08T09:00:00 Last Updated: 2024-08-05T05:33:43.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: SonicWall SonicOS on Network Security Appliance (NSA) 2016 Q4 devices has XSS via the Configure SSO screens. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0001 - http://www.securityfocus.com/bid/102438 - https://www.vulnerability-lab.com/get_content.php?id=1725
CVE ID: CVE-2018-5281 State: PUBLISHED Published: 2018-01-08T09:00:00 Last Updated: 2024-08-05T05:33:43.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: SonicWall SonicOS on Network Security Appliance (NSA) 2017 Q4 devices has XSS via the CFS Custom Category and Cloud AV DB Exclusion Settings screens. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0002 - http://www.securityfocus.com/bid/102443 - https://www.vulnerability-lab.com/get_content.php?id=1729
CVE ID: CVE-2018-5282 State: PUBLISHED Published: 2018-01-08T09:00:00 Last Updated: 2024-08-05T05:33:44.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kentico 9.0 through 11.0 has a stack-based buffer overflow via the SqlName, SqlPswd, Database, UserName, or Password field in a SilentInstall XML document. NOTE: the vendor disputes this issue because neither a buffer overflow nor a crash can be reproduced; also, reading XML documents is implemented exclusively with managed code within the Microsoft .NET Framework Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=1943 - https://www.exploit-db.com/exploits/4354
iner: References: - https://www.vulnerability-lab.com/get_content.php?id=1943 - https://www.exploit-db.com/exploits/43547/
CVE ID: CVE-2018-5283 State: PUBLISHED Published: 2018-01-08T09:00:00 Last Updated: 2024-08-05T05:33:43.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Photos in Wifi application 1.0.1 for iOS has directory traversal via the ext parameter to assets-library://asset/asset.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=1600
CVE ID: CVE-2018-5284 State: PUBLISHED Published: 2018-01-08T07:00:00 Last Updated: 2024-08-05T05:33:43.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ImageInject plugin 1.15 for WordPress has XSS via the flickr_appid parameter to wp-admin/options-general.php. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/support/topic/stored-xss-csrf-bug-at-the-latest-version-of-imageinject/ - https://wpvulndb.com/vulnerabilities/8994 - https://github.com/d4wner/Vulnerabilities-Report/blob/master/ImageInject.md
CVE ID: CVE-2018-5285 State: PUBLISHED Published: 2018-01-08T07:00:00 Last Updated: 2024-08-05T05:33:43.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ImageInject plugin 1.15 for WordPress has CSRF via wp-admin/options-general.php. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/support/topic/stored-xss-csrf-bug-at-the-latest-version-of-imageinject/ - https://wpvulndb.com/vulnerabilities/8994 - https://github.com/d4wner/Vulnerabilities-Report/blob/master/ImageInject.md
CVE ID: CVE-2018-5286 State: PUBLISHED Published: 2018-01-08T07:00:00 Last Updated: 2024-08-05T05:33:43.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-about page. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8995 - https://github.com/d4wner/Vulnerabilities-Report/blob/master/gd-rating-system.md - https://wordpress.org/support/topic/xss-lfi-bugs-at-the-latest-version-of-gd-rating-system/
CVE ID: CVE-2018-5287 State: PUBLISHED Published: 2018-01-08T07:00:00 Last Updated: 2024-08-05T05:33:43.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-about page. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8995 - https://github.com/d4wner/Vulnerabilities-Report/blob/master/gd-rating-system.md - https://wordpress.org/support/topic/xss-lfi-bugs-at-the-latest-version-of-gd-rating-system/
CVE ID: CVE-2018-5288 State: PUBLISHED Published: 2018-01-08T07:00:00 Last Updated: 2024-08-05T05:33:44.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-transfer page. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8995 - https://github.com/d4wner/Vulnerabilities-Report/blob/master/gd-rating-system.md - https://wordpress.org/support/topic/xss-lfi-bugs-at-the-latest-version-of-gd-rating-system/
CVE ID: CVE-2018-5289 State: PUBLISHED Published: 2018-01-08T07:00:00 Last Updated: 2024-08-05T05:33:44.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-information page. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8995 - https://github.com/d4wner/Vulnerabilities-Report/blob/master/gd-rating-system.md - https://wordpress.org/support/topic/xss-lfi-bugs-at-the-latest-version-of-gd-rating-system/
CVE ID: CVE-2018-5290 State: PUBLISHED Published: 2018-01-08T07:00:00 Last Updated: 2024-08-05T05:33:44.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-transfer page. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8995 - https://github.com/d4wner/Vulnerabilities-Report/blob/master/gd-rating-system.md - https://wordpress.org/support/topic/xss-lfi-bugs-at-the-latest-version-of-gd-rating-system/
CVE ID: CVE-2018-5291 State: PUBLISHED Published: 2018-01-08T07:00:00 Last Updated: 2024-08-05T05:33:44.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-tools page. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8995 - https://github.com/d4wner/Vulnerabilities-Report/blob/master/gd-rating-system.md - https://wordpress.org/support/topic/xss-lfi-bugs-at-the-latest-version-of-gd-rating-system/
CVE ID: CVE-2018-5292 State: PUBLISHED Published: 2018-01-08T07:00:00 Last Updated: 2024-08-05T05:33:43.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-information page. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8995 - https://github.com/d4wner/Vulnerabilities-Report/blob/master/gd-rating-system.md - https://wordpress.org/support/topic/xss-lfi-bugs-at-the-latest-version-of-gd-rating-system/
CVE ID: CVE-2018-5293 State: PUBLISHED Published: 2018-01-08T07:00:00 Last Updated: 2024-08-05T05:33:43.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-tools page. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8995 - https://github.com/d4wner/Vulnerabilities-Report/blob/master/gd-rating-system.md - https://wordpress.org/support/topic/xss-lfi-bugs-at-the-latest-version-of-gd-rating-system/
CVE ID: CVE-2018-5294 State: PUBLISHED Published: 2018-01-08T07:00:00 Last Updated: 2024-08-05T05:33:43.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libming 0.4.8, there is an integer overflow (caused by an out-of-range left shift) in the readUInt32 function (util/read.c). Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted swf file. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/03/msg00008.html - https://github.com/libming/libming/issues/98 - https://security.gentoo.org/glsa/201904-24
CVE ID: CVE-2018-5295 State: PUBLISHED Published: 2018-01-08T07:00:00Z Last Updated: 2024-09-17T02:20:59.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: In PoDoFo 0.9.5, there is an integer overflow in the PdfXRefStreamParserObject::ParseStream function (base/PdfXRefStreamParserObject.cpp). Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted pdf file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1531897
CVE ID: CVE-2018-5296 State: PUBLISHED Published: 2018-01-08T07:00:00Z Last Updated: 2024-09-16T23:06:01.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: In PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PdfParser::ReadXRefSubsection function (base/PdfParser.cpp). Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted pdf file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1531956
CVE ID: CVE-2018-5298 State: PUBLISHED Published: 2018-01-08T08:00:00 Last Updated: 2024-08-05T05:33:44.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Procter & Gamble "Oral-B App" (aka com.pg.oralb.oralbapp) application 5.0.0 for Android, AES encryption with static parameters is used to secure the locally stored shared preferences. An attacker can gain access to locally stored user data more easily by leveraging access to the preferences XML file. Additional Analyst Notes: - CVE Program Container: References: - https://1337sec.blogspot.de/2018/01/auditing-oral-b-app-v500.html
CVE ID: CVE-2018-5299 State: PUBLISHED Published: 2018-01-16T22:00:00 Last Updated: 2024-08-05T05:33:43.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based Buffer Overflow Vulnerability exists in the web server in Pulse Secure Pulse Connect Secure (PCS) before 8.3R4 and Pulse Policy Secure (PPS) before 5.4R4, leading to memory corruption and possibly remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43604
CVE ID: CVE-2018-5301 State: PUBLISHED Published: 2018-01-08T22:00:00Z Last Updated: 2024-09-17T02:47:31.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: Magento Community Edition and Enterprise Edition before 2.0.10 and 2.1.x before 2.1.2 have CSRF resulting in deletion of a customer address from an address book, aka APPSEC-1433. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2010-and-212-security-update
CVE ID: CVE-2018-5303 State: PUBLISHED Published: 2018-05-11T21:00:00 Last Updated: 2024-08-05T05:33:44.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on the Impinj Speedway Connect R420 RFID Reader before 2.2.2. The license key parameter of the web application is vulnerable to Cross Site Scripting; this vulnerability allows an attacker to send malicious code to another user. Additional Analyst Notes: - CVE Program Container: References: - http://blog.isecurion.com/2018/05/09/impinj-speedway-r420-rfid-reader/
CVE ID: CVE-2018-5304 State: PUBLISHED Published: 2018-05-11T21:00:00 Last Updated: 2024-08-05T05:33:43.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on the Impinj Speedway Connect R420 RFID Reader before 2.2.2. The affected web interface is vulnerable to ClickJacking or UI Redressing: it is possible to access the web application in an iframe, and clicking on the iframe will redirect to a third-party application or perform other malicious actions. Additional Analyst Notes: - CVE Program Container: References: - http://blog.isecurion.com/2018/05/09/impinj-speedway-r420-rfid-reader/
CVE ID: CVE-2018-5306 State: PUBLISHED Published: 2018-02-09T22:00:00 Last Updated: 2024-08-05T05:33:43.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Sonatype Nexus Repository Manager (aka NXRM) 3.x before 3.8 allow remote attackers to inject arbitrary web script or HTML via (1) the repoId or (2) format parameter to service/siesta/healthcheck/healthCheckFileDetail/.../index.html; (3) the filename in the "File Upload" functionality of the Staging Upload; (4) the username when creating a new user; or (5) the IQ Server URL field in the IQ Server Connection functionality. Additional Analyst Notes: - CVE Program Container: R
the IQ Server URL field in the IQ Server Connection functionality. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Feb/23 - https://www.sec-consult.com/en/blog/advisories/multiple-cross-site-scripting-vulnerabilities-in-sonatype-nexus-repository-manager-oss-pro/index.html - https://support.sonatype.com/hc/en-us/articles/360000134968
CVE ID: CVE-2018-5307 State: PUBLISHED Published: 2018-02-09T22:00:00 Last Updated: 2024-08-05T05:33:44.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Sonatype Nexus Repository Manager (aka NXRM) 2.x before 2.14.6 allow remote attackers to inject arbitrary web script or HTML via (1) the repoId or (2) format parameter to service/siesta/healthcheck/healthCheckFileDetail/.../index.html; (3) the filename in the "File Upload" functionality of the Staging Upload; (4) the username when creating a new user; or (5) the IQ Server URL field in the IQ Server Connection functionality. Additional Analyst Notes: - CVE Program Container
(5) the IQ Server URL field in the IQ Server Connection functionality. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Feb/23 - https://www.sec-consult.com/en/blog/advisories/multiple-cross-site-scripting-vulnerabilities-in-sonatype-nexus-repository-manager-oss-pro/index.html - https://support.sonatype.com/hc/en-us/articles/360000134928
CVE ID: CVE-2018-5308 State: PUBLISHED Published: 2018-01-09T05:00:00 Last Updated: 2024-08-05T05:33:43.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: PoDoFo 0.9.5 does not properly validate memcpy arguments in the PdfMemoryOutputStream::Write function (base/PdfOutputStream.cpp). Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1532390
CVE ID: CVE-2018-5309 State: PUBLISHED Published: 2018-01-09T05:00:00 Last Updated: 2024-08-05T05:33:43.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: In PoDoFo 0.9.5, there is an integer overflow in the PdfObjectStreamParserObject::ReadObjectsFromStream function (base/PdfObjectStreamParserObject.cpp). Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted pdf file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1532381
CVE ID: CVE-2018-5310 State: PUBLISHED Published: 2018-01-09T05:00:00Z Last Updated: 2024-09-16T22:56:28.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the "Media from FTP" plugin before 9.85 for WordPress, Directory Traversal exists via the searchdir parameter to the wp-admin/admin.php?page=mediafromftp-search-register URI. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/media-from-ftp/#developers - https://wordpress.org/support/topic/any-directory-traversal-bugs-at-the-latest-version-of-media-from-ftp/ - https://github.com/d4wner/Vulnerabilities-Report/blob/master/media-from-ftp.md
CVE ID: CVE-2018-5311 State: PUBLISHED Published: 2018-01-09T05:00:00Z Last Updated: 2024-09-17T01:01:57.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Easy Custom Auto Excerpt plugin 2.4.6 for WordPress has XSS via the tonjoo_ecae_options[custom_css] parameter to the wp-admin/admin.php?page=tonjoo_excerpt URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d4wner/Vulnerabilities-Report/blob/master/easy-custom-auto-excerpt.md - https://wordpress.org/support/topic/stored-xss-bugs-at-the-latest-version-of-easy-custom-auto-excerpt/
CVE ID: CVE-2018-5312 State: PUBLISHED Published: 2018-01-09T05:00:00Z Last Updated: 2024-09-16T20:22:13.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tabs-responsive plugin 1.8.0 for WordPress has XSS via the post_title parameter to wp-admin/post.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d4wner/Vulnerabilities-Report/blob/master/tabs-responsive.md - https://wordpress.org/support/topic/stored-xss-bugs-at-the-latest-version-of-tabs-responsive/
CVE ID: CVE-2018-5313 State: PUBLISHED Published: 2018-03-08T20:00:00 Last Updated: 2024-08-05T05:33:44.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability allows local attackers to escalate privilege on Rapid Scada 5.5.0 because of weak C:\SCADA permissions. The specific flaw exists within the access control that is set and modified during the installation of the product. The product sets weak access control restrictions. An attacker can leverage this vulnerability to execute arbitrary code under the context of Administrator, the IUSR account, or SYSTEM. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Mar/1
r SYSTEM. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Mar/11 - http://packetstormsecurity.com/files/146668/Rapid-Scada-5.5.0-Insecure-Permissions.html
CVE ID: CVE-2018-5314 State: PUBLISHED Published: 2018-03-01T17:00:00 Last Updated: 2024-08-05T05:33:44.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: Command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13; and the NetScaler Load Balancing instance distributed with NetScaler SD-WAN/CloudBridge 4000, 4100, 5000 and 5100 WAN Optimization Edition 9.3.0 allows remote attackers to execute a system command or read arbitrary files via an SSH login prompt. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040439 - https://support.citr
l Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040439 - https://support.citrix.com/article/CTX232199 - http://www.securityfocus.com/bid/103186