Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-6503 State: PUBLISHED Published: 2018-09-20T19:00:00Z Last Updated: 2024-09-17T02:06:45.053Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Micro Focus Products: ArcSight Management Center Problem Types: Access Control Vulnerability Description: A potential Access Control vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for vulnerable Access Controls. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03245142
CVE ID: CVE-2018-6504 State: PUBLISHED Published: 2018-09-20T19:00:00Z Last Updated: 2024-09-16T17:49:21.890Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Micro Focus Products: ArcSight Management Center Problem Types: Cross-Site Request Forgery (CSRF) Description: A potential Cross-Site Request Forgery (CSRF) vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for Cross-Site Request Forgery (CSRF). Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03245142
CVE ID: CVE-2018-6505 State: PUBLISHED Published: 2018-09-20T19:00:00Z Last Updated: 2024-09-17T03:59:35.875Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Micro Focus Products: ArcSight Management Center Problem Types: Unauthenticated File Download Description: A potential Unauthenticated File Download vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for Unauthenticated File Downloads. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03245142
CVE ID: CVE-2018-6506 State: PUBLISHED Published: 2018-02-12T04:00:00 Last Updated: 2024-08-05T06:10:10.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Scripting (XSS) exists in the Add Forum feature in the Administrative Panel in miniBB 3.2.2 via crafted use of an onload attribute of an SVG element in the supertitle field. Additional Analyst Notes: - CVE Program Container: References: - https://offensivehacking.wordpress.com/2018/02/07/minibb-forums-v3-2-2-stored-xss/
CVE ID: CVE-2018-6508 State: PUBLISHED Published: 2018-02-09T20:00:00Z Last Updated: 2024-09-17T01:55:41.774Z Vendors: Puppet Products: Puppet Enterprise, puppetlabs/facter_task, puppetlabs/puppet_conf, puppetlabs/apt, puppetlabs/mysql, puppetlabs/apache Problem Types: Remote Code Execution Description: Puppet Enterprise 2017.3.x prior to 2017.3.3 are vulnerable to a remote execution bug when a specially crafted string was passed into the facter_task or puppet_conf tasks. This vulnerability only affects tasks in the affected modules, if you are not using puppet tasks you are not affected by this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://puppet.co
e not affected by this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://puppet.com/security/cve/CVE-2018-6508 - http://www.securityfocus.com/bid/103020
CVE ID: CVE-2018-6510 State: PUBLISHED Published: 2018-05-08T18:00:00Z Last Updated: 2024-09-16T17:37:42.972Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Puppet Products: Puppet Enterprise Problem Types: Cross-site scripting Description: A cross-site scripting vulnerability in Puppet Enterprise Console of Puppet Enterprise allows a user to inject scripts into the Puppet Enterprise Console when using the Orchestrator. Affected releases are Puppet Puppet Enterprise: 2017.3.x versions prior to 2017.3.6. Additional Analyst Notes: - CVE Program Container: References: - https://puppet.com/security/cve/CVE-2018-6510
CVE ID: CVE-2018-6511 State: PUBLISHED Published: 2018-05-08T18:00:00Z Last Updated: 2024-09-16T20:32:57.469Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Puppet Products: Puppet Enterprise Problem Types: Cross-site scripting Description: A cross-site scripting vulnerability in Puppet Enterprise Console of Puppet Enterprise allows a user to inject scripts into the Puppet Enterprise Console when using the Puppet Enterprise Console. Affected releases are Puppet Puppet Enterprise: 2017.3.x versions prior to 2017.3.6. Additional Analyst Notes: - CVE Program Container: References: - https://puppet.com/security/cve/CVE-2018-6511
CVE ID: CVE-2018-6512 State: PUBLISHED Published: 2018-06-11T20:00:00Z Last Updated: 2024-09-16T20:17:47.278Z Vendors: Puppet Products: Puppet Enterprise 2018.1.x prior to 2018.1.1, razor-server and pe-razor-server prior to 1.9.0.0 Problem Types: Insecure Temporary File Description: The previous version of Puppet Enterprise 2018.1 is vulnerable to unsafe code execution when upgrading pe-razor-server. Affected releases are Puppet Enterprise: 2018.1.x versions prior to 2018.1.1 and razor-server and pe-razor-server prior to 1.9.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://puppet.com/security/cve/CVE-2018-6512
CVE ID: CVE-2018-6513 State: PUBLISHED Published: 2018-06-11T20:00:00Z Last Updated: 2024-09-17T01:46:25.460Z Vendors: Puppet Products: Puppet Enterprise and Puppet Agent Problem Types: Arbitrary Code Execution Description: Puppet Enterprise 2016.4.x prior to 2016.4.12, Puppet Enterprise 2017.3.x prior to 2017.3.7, Puppet Enterprise 2018.1.x prior to 2018.1.1, Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, and Puppet Agent 5.5.x prior to 5.5.2, were vulnerable to an attack where an unprivileged user on Windows agents could write custom facts that can escalate privileges on the next puppet run. This was possible through the loading of shared libraries from untrusted
an escalate privileges on the next puppet run. This was possible through the loading of shared libraries from untrusted paths. Additional Analyst Notes: - CVE Program Container: References: - https://puppet.com/security/cve/CVE-2018-6513
CVE ID: CVE-2018-6514 State: PUBLISHED Published: 2018-06-11T20:00:00Z Last Updated: 2024-09-16T17:49:24.249Z Vendors: Puppet Products: Puppet Agent Problem Types: Arbitrary Code Execution Description: In Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, Puppet Agent 5.5.x prior to 5.5.2, Facter on Windows is vulnerable to a DLL preloading attack, which could lead to a privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://puppet.com/security/cve/CVE-2018-6514
CVE ID: CVE-2018-6515 State: PUBLISHED Published: 2018-06-11T20:00:00Z Last Updated: 2024-09-16T23:10:26.852Z Vendors: Puppet Products: Puppet Agent Problem Types: Arbitrary Code Execution Description: Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, and Puppet Agent 5.5.x prior to 5.5.2 on Windows only, with a specially crafted configuration file an attacker could get pxp-agent to load arbitrary code with privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://puppet.com/security/cve/CVE-2018-6515
CVE ID: CVE-2018-6516 State: PUBLISHED Published: 2018-06-14T21:00:00Z Last Updated: 2024-09-16T23:45:51.357Z Vendors: Puppet Products: pe-client-tools Problem Types: Arbitrary Code Execution Description: On Windows only, with a specifically crafted configuration file an attacker could get Puppet PE client tools (aka pe-client-tools) 16.4.x prior to 16.4.6, 17.3.x prior to 17.3.6, and 18.1.x prior to 18.1.2 to load arbitrary code with privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://puppet.com/security/cve/CVE-2018-6516
CVE ID: CVE-2018-6517 State: PUBLISHED Published: 2019-03-17T19:14:43 Last Updated: 2024-08-05T06:10:10.019Z Vendors: Puppet Products: Chloride Problem Types: Improper handling of known_hosts file Description: Prior to version 0.3.0, chloride's use of net-ssh resulted in host fingerprints for previously unknown hosts getting added to the user's known_hosts file without confirmation. In version 0.3.0 this is updated so that the user's known_hosts file is not updated by chloride. Additional Analyst Notes: - CVE Program Container: References: - https://puppet.com/security/cve/CVE-2018-6517
CVE ID: CVE-2018-6518 State: PUBLISHED Published: 2018-04-26T14:00:00 Last Updated: 2024-08-05T06:10:10.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Composr CMS 10.0.13 has XSS via the site_name parameter in a page=admin-setupwizard&type=step3 request to /adminzone/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/faizzaidi/Composr-CMS-10.0.13-Cross-Site-Scripting-XSS
CVE ID: CVE-2018-6519 State: PUBLISHED Published: 2018-02-02T01:00:00 Last Updated: 2024-08-05T06:10:10.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SAML2 library before 1.10.4, 2.x before 2.3.5, and 3.x before 3.1.1 in SimpleSAMLphp has a Regular Expression Denial of Service vulnerability for fraction-of-seconds data in a timestamp. Additional Analyst Notes: - CVE Program Container: References: - https://simplesamlphp.org/security/201801-01 - https://www.debian.org/security/2018/dsa-4127
CVE ID: CVE-2018-6520 State: PUBLISHED Published: 2018-02-02T01:00:00 Last Updated: 2024-08-05T06:10:10.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: SimpleSAMLphp before 1.15.2 allows remote attackers to bypass an open redirect protection mechanism via crafted authority data in a URL. Additional Analyst Notes: - CVE Program Container: References: - https://simplesamlphp.org/security/201801-02
CVE ID: CVE-2018-6521 State: PUBLISHED Published: 2018-02-02T01:00:00 Last Updated: 2024-08-05T06:10:09.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sqlauth module in SimpleSAMLphp before 1.15.2 relies on the MySQL utf8 charset, which truncates queries upon encountering four-byte characters. There might be a scenario in which this allows remote attackers to bypass intended access restrictions. Additional Analyst Notes: - CVE Program Container: References: - https://simplesamlphp.org/security/201801-03 - https://lists.debian.org/debian-lts-announce/2018/02/msg00008.html - https://www.debian.org/security/2018/dsa-4127
CVE ID: CVE-2018-6522 State: PUBLISHED Published: 2018-02-02T01:00:00 Last Updated: 2024-08-05T06:10:09.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKRgFtXp.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220408. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/nProtectAntivirus_POC/tree/master/TKRgFtXp_0x220408 - http://inca.co.kr/include_file/pdf_down/nProtect%20AVS%20V4%20Vulnerability%20Response%20Release%20Notes.pdf
CVE ID: CVE-2018-6523 State: PUBLISHED Published: 2018-02-02T01:00:00 Last Updated: 2024-08-05T06:10:10.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKFsAv.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x22045c. Additional Analyst Notes: - CVE Program Container: References: - http://inca.co.kr/include_file/pdf_down/nProtect%20AVS%20V4%20Vulnerability%20Response%20Release%20Notes.pdf - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/nProtectAntivirus_POC/tree/master/TKFsAv_0x22045c
CVE ID: CVE-2018-6524 State: PUBLISHED Published: 2018-02-02T01:00:00 Last Updated: 2024-08-05T06:10:10.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKFsAv.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220c20. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/nProtectAntivirus_POC/tree/master/TKFsAv_0x220c20 - http://inca.co.kr/include_file/pdf_down/nProtect%20AVS%20V4%20Vulnerability%20Response%20Release%20Notes.pdf
CVE ID: CVE-2018-6525 State: PUBLISHED Published: 2018-02-02T01:00:00 Last Updated: 2024-08-05T06:10:10.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKFsAv.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220458. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/nProtectAntivirus_POC/tree/master/TKFsAv_0x220458 - http://inca.co.kr/include_file/pdf_down/nProtect%20AVS%20V4%20Vulnerability%20Response%20Release%20Notes.pdf
CVE ID: CVE-2018-6526 State: PUBLISHED Published: 2018-02-02T09:00:00 Last Updated: 2024-08-05T06:10:10.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: view_all_bug_page.php in MantisBT 2.10.0-development before 2018-02-02 allows remote attackers to discover the full path via an invalid filter parameter, related to a filter_ensure_valid_filter call in current_user_api.php. Additional Analyst Notes: - CVE Program Container: References: - https://mantisbt.org/bugs/view.php?id=23921 - http://www.securityfocus.com/bid/103065 - https://github.com/mantisbt/mantisbt/commit/de686a9e6d8c909485b87ca09c8f912bf83082f2
CVE ID: CVE-2018-6527 State: PUBLISHED Published: 2018-03-06T20:00:00 Last Updated: 2024-08-05T06:10:10.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS vulnerability in htdocs/webinc/js/adv_parent_ctrl_map.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted deviceid parameter to soap.cgi. Additional Analyst Notes: - CVE Program Container: References: - ftp://FTP2.DLINK.COM/SECURITY_ADVISEMENTS/DIR-868L/REVA/DIR-868L_REVA_FIRMWARE_PATCH_NOTES_1.20B01_EN_WW.pdf - ftp://FTP2.DLINK.COM/S
INK.COM/SECURITY_ADVISEMENTS/DIR-868L/REVA/DIR-868L_REVA_FIRMWARE_PATCH_NOTES_1.20B01_EN_WW.pdf - ftp://FTP2.DLINK.COM/SECURITY_ADVISEMENTS/DIR-860L/REVA/DIR-860L_REVA_FIRMWARE_PATCH_NOTES_1.11B01_EN_WW.pdf - https://github.com/TheBeeMan/Pwning-multiple-dlink-router-via-SOAP-proto - ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-865L/REVA/DIR-865L_REVA_FIRMWARE_PATCH_NOTES_1.10B01_EN_WW.pdf
CVE ID: CVE-2018-6528 State: PUBLISHED Published: 2018-03-06T20:00:00 Last Updated: 2024-08-05T06:10:10.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS vulnerability in htdocs/webinc/body/bsc_sms_send.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted receiver parameter to soap.cgi. Additional Analyst Notes: - CVE Program Container: References: - ftp://FTP2.DLINK.COM/SECURITY_ADVISEMENTS/DIR-868L/REVA/DIR-868L_REVA_FIRMWARE_PATCH_NOTES_1.20B01_EN_WW.pdf - ftp://FTP2.DLINK.COM/SECURI
OM/SECURITY_ADVISEMENTS/DIR-868L/REVA/DIR-868L_REVA_FIRMWARE_PATCH_NOTES_1.20B01_EN_WW.pdf - ftp://FTP2.DLINK.COM/SECURITY_ADVISEMENTS/DIR-860L/REVA/DIR-860L_REVA_FIRMWARE_PATCH_NOTES_1.11B01_EN_WW.pdf - https://github.com/TheBeeMan/Pwning-multiple-dlink-router-via-SOAP-proto - ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-865L/REVA/DIR-865L_REVA_FIRMWARE_PATCH_NOTES_1.10B01_EN_WW.pdf
CVE ID: CVE-2018-6529 State: PUBLISHED Published: 2018-03-06T20:00:00 Last Updated: 2024-08-05T06:10:10.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS vulnerability in htdocs/webinc/js/bsc_sms_inbox.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted Treturn parameter to soap.cgi. Additional Analyst Notes: - CVE Program Container: References: - ftp://FTP2.DLINK.COM/SECURITY_ADVISEMENTS/DIR-868L/REVA/DIR-868L_REVA_FIRMWARE_PATCH_NOTES_1.20B01_EN_WW.pdf - ftp://FTP2.DLINK.COM/SECURITY
/SECURITY_ADVISEMENTS/DIR-868L/REVA/DIR-868L_REVA_FIRMWARE_PATCH_NOTES_1.20B01_EN_WW.pdf - ftp://FTP2.DLINK.COM/SECURITY_ADVISEMENTS/DIR-860L/REVA/DIR-860L_REVA_FIRMWARE_PATCH_NOTES_1.11B01_EN_WW.pdf - https://github.com/TheBeeMan/Pwning-multiple-dlink-router-via-SOAP-proto - ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-865L/REVA/DIR-865L_REVA_FIRMWARE_PATCH_NOTES_1.10B01_EN_WW.pdf
CVE ID: CVE-2018-6530 State: PUBLISHED Published: 2018-03-06T20:00:00.000Z Last Updated: 2025-10-21T23:45:55.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous versions, DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-65L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to execute arbitrary OS commands via the service parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - ftp://FTP2.DLINK.COM/SECURIT
. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - ftp://FTP2.DLINK.COM/SECURITY_ADVISEMENTS/DIR-868L/REVA/DIR-868L_REVA_FIRMWARE_PATCH_NOTES_1.20B01_EN_WW.pdf - ftp://FTP2.DLINK.COM/SECURITY_ADVISEMENTS/DIR-860L/REVA/DIR-860L_REVA_FIRMWARE_PATCH_NOTES_1.11B01_EN_WW.pdf - https://github.com/TheBeeMan/Pwning-multiple-dlink-router-via-SOAP-proto - ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-865L/REVA/DIR-865L_REVA_FIRMWARE_PATCH_NOTES_1.10B01_EN_WW.pdf - ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-880L/REVA/DIR-880L_REVA_FIRMWARE_PATCH_NOTES_1.08B06_EN_WW.pdf
CVE ID: CVE-2018-6532 State: PUBLISHED Published: 2018-02-27T19:00:00 Last Updated: 2024-08-05T06:10:10.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Icinga 2.x through 2.8.1. By sending specially crafted (authenticated and unauthenticated) requests, an attacker can exhaust a lot of memory on the server side, triggering the OOM killer. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Icinga/icinga2/pull/6103
CVE ID: CVE-2018-6533 State: PUBLISHED Published: 2018-02-27T19:00:00 Last Updated: 2024-08-05T06:10:10.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Icinga 2.x through 2.8.1. By editing the init.conf file, Icinga 2 can be run as root. Following this the program can be used to run arbitrary code as root. This was fixed by no longer using init.conf to determine account information for any root-executed code (a larger issue than CVE-2017-16933). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Icinga/icinga2/pull/5850
CVE ID: CVE-2018-6534 State: PUBLISHED Published: 2018-02-27T19:00:00 Last Updated: 2024-08-05T06:10:10.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Icinga 2.x through 2.8.1. By sending specially crafted messages, an attacker can cause a NULL pointer dereference, which can cause the product to crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Icinga/icinga2/pull/6104
CVE ID: CVE-2018-6535 State: PUBLISHED Published: 2018-02-27T19:00:00 Last Updated: 2024-08-05T06:10:10.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Icinga 2.x through 2.8.1. The lack of a constant-time password comparison function can disclose the password to an attacker. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Icinga/icinga2/pull/5715 - https://github.com/Icinga/icinga2/issues/4920
CVE ID: CVE-2018-6536 State: PUBLISHED Published: 2018-02-02T09:00:00 Last Updated: 2024-08-05T06:10:10.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Icinga 2.x through 2.8.1. The daemon creates an icinga2.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for icinga2.pid modification before a root script executes a "kill `cat /pathname/icinga2.pid`" command, as demonstrated by icinga2.init.d.cmake. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Icinga/icinga2/issues/5991
CVE ID: CVE-2018-6537 State: PUBLISHED Published: 2018-02-02T09:00:00 Last Updated: 2024-08-05T06:10:10.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in the control protocol of Flexense SyncBreeze Enterprise v10.4.18 allows remote attackers to execute arbitrary code by sending a crafted packet to TCP port 9121. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43936/
CVE ID: CVE-2018-6538 State: REJECTED Published: 2018-02-03T18:00:00 Last Updated: 2018-02-03T17:57:01 Description: No description available.
CVE ID: CVE-2018-6540 State: PUBLISHED Published: 2018-02-02T09:00:00 Last Updated: 2024-08-05T06:10:10.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3699-1/ - https://github.com/gdraheim/zziplib/issues/15 - https://lists.debian.org/debian-lts-announce/2020/06/msg00029.html
CVE ID: CVE-2018-6541 State: PUBLISHED Published: 2018-02-02T09:00:00 Last Updated: 2024-08-05T06:10:10.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address (when handling disk64_trailer local entries) in __zzip_fetch_disk_trailer (zzip/zip.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3699-1/ - https://github.com/gdraheim/zziplib/issues/16 - https://access.redhat.com/errata/RHSA-2019:2196 - https://lists.debian.org/debian-lts-announce/2020/06/msg00029
ues/16 - https://access.redhat.com/errata/RHSA-2019:2196 - https://lists.debian.org/debian-lts-announce/2020/06/msg00029.html
CVE ID: CVE-2018-6542 State: PUBLISHED Published: 2018-02-02T09:00:00 Last Updated: 2024-08-05T06:10:10.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ZZIPlib 0.13.67, there is a bus error (when handling a disk64_trailer seek value) caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gdraheim/zziplib/issues/17
CVE ID: CVE-2018-6543 State: PUBLISHED Published: 2018-02-02T09:00:00 Last Updated: 2024-08-05T06:10:10.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GNU Binutils 2.30, there's an integer overflow in the function load_specific_debug_section() in objdump.c, which results in `malloc()` with 0 size. A crafted ELF file allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=22769 - https://security.gentoo.org/glsa/201811-17 - http://www.securityfocus.com/bid/102985 - http://lists.opensuse.org/opensuse-sec