Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-19493 State: PUBLISHED Published: 2019-07-10T14:44:47 Last Updated: 2024-08-05T11:37:11.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. There is a persistent XSS vulnerability in the environment pages due to a lack of input validation and output encoding. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab-ce/issues/53037 - https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/ - http://www.securityfocus.com/bid/109122
CVE ID: CVE-2018-19494 State: PUBLISHED Published: 2019-07-10T14:46:44 Last Updated: 2024-08-05T11:37:11.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. There is an incorrect access vulnerability that allows an unauthorized user to view private group names. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab-ce/issues/51262 - https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/
CVE ID: CVE-2018-19495 State: PUBLISHED Published: 2019-07-10T14:48:50 Last Updated: 2024-08-05T11:37:11.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. There is an SSRF vulnerability in the Prometheus integration. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab-ee/issues/8167 - https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/
CVE ID: CVE-2018-19496 State: PUBLISHED Published: 2019-07-10T14:50:43 Last Updated: 2024-08-05T11:37:11.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition 10.x and 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. There is an incorrect access control vulnerability that permits a user with insufficient privileges to promote a project milestone to a group milestone. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab-ce/issues/51301 - https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/
CVE ID: CVE-2018-19497 State: PUBLISHED Published: 2018-11-29T23:00:00 Last Updated: 2024-08-05T11:37:11.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: In The Sleuth Kit (TSK) through 4.6.4, hfs_cat_traverse in tsk/fs/hfs.c does not properly determine when a key length is too large, which allows attackers to cause a denial of service (SEGV on unknown address with READ memory access in a tsk_getu16 call in hfs_dir_open_meta_cb in tsk/fs/hfs_dent.c). Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/12/msg00008.html - https://github.com/sleuthkit/sleuthkit/commit/bc04aa017c0bd297de8a3b7fc40ffc6ddddbb95d - https:/
2018/12/msg00008.html - https://github.com/sleuthkit/sleuthkit/commit/bc04aa017c0bd297de8a3b7fc40ffc6ddddbb95d - https://github.com/sleuthkit/sleuthkit/pull/1374 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NLSVLDQLPGKRHHBPYUXVJJPAID6CYBXD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZXFYOOMSP7NWRTSO4XXGHXAY3CJNAJ6/ - https://lists.debian.org/debian-lts-announce/2022/06/msg00015.html
CVE ID: CVE-2018-19498 State: PUBLISHED Published: 2019-03-17T21:41:11 Last Updated: 2024-08-05T11:37:11.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Simplenia Pages plugin 2.6.0 for Atlassian Bitbucket Server has XSS. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151466/Pages-For-Bitbucket-Server-2.6.0-Cross-Site-Scripting.html - https://seclists.org/bugtraq/2019/Jan/53 - https://marketplace.atlassian.com/apps/1212525/pages-for-bitbucket-server/version-history - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-037.txt
CVE ID: CVE-2018-19499 State: PUBLISHED Published: 2018-11-23T19:00:00 Last Updated: 2024-08-05T11:37:11.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vanilla before 2.5.5 and 2.6.x before 2.6.2 allows Remote Code Execution because authenticated administrators have a reachable call to unserialize in the Gdn_Format class. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/407552
CVE ID: CVE-2018-19502 State: PUBLISHED Published: 2018-11-23T19:00:00 Last Updated: 2024-08-05T11:37:11.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1. There was a heap-based buffer overflow in the function excluded_channels() in libfaad/syntax.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/tree/master/faad - https://sourceforge.net/p/faac/bugs/240/ - https://lists.debian.org/debian-lts-announce/2019/08/msg00033.html - https://www.debian.org/security/2019/dsa-4522 - https://seclists.org/bugtraq/2019/Sep/28 - https://security.gentoo.org/glsa/202
/www.debian.org/security/2019/dsa-4522 - https://seclists.org/bugtraq/2019/Sep/28 - https://security.gentoo.org/glsa/202006-17
CVE ID: CVE-2018-19503 State: PUBLISHED Published: 2018-11-23T19:00:00 Last Updated: 2024-08-05T11:37:11.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1. There was a stack-based buffer overflow in the function calculate_gain() in libfaad/sbr_hfadj.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/tree/master/faad - https://sourceforge.net/p/faac/bugs/240/ - https://www.debian.org/security/2019/dsa-4522 - https://seclists.org/bugtraq/2019/Sep/28 - https://security.gentoo.org/glsa/202006-17
CVE ID: CVE-2018-19504 State: PUBLISHED Published: 2018-11-23T19:00:00 Last Updated: 2024-08-05T11:37:11.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1. There is a NULL pointer dereference in ifilter_bank() in libfaad/filtbank.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/tree/master/faad - https://sourceforge.net/p/faac/bugs/240/ - https://www.debian.org/security/2019/dsa-4522 - https://seclists.org/bugtraq/2019/Sep/28 - https://security.gentoo.org/glsa/202006-17
CVE ID: CVE-2018-19505 State: PUBLISHED Published: 2019-01-03T19:00:00 Last Updated: 2024-08-05T11:37:11.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remedy AR System Server in BMC Remedy 7.1 may fail to set the correct user context in certain impersonation scenarios, which can allow a user to act with the identity of a different user, because userdata.js in the WOI:WorkOrderConsole component allows a username substitution involving a UserData_Init call. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1042177 - http://packetstormsecurity.com/files/150492/BMC-Remedy-7.1-User-Impersonation.html - http://seclists.org/fulldisc
2177 - http://packetstormsecurity.com/files/150492/BMC-Remedy-7.1-User-Impersonation.html - http://seclists.org/fulldisclosure/2018/Nov/62
CVE ID: CVE-2018-19506 State: PUBLISHED Published: 2018-12-19T19:00:00 Last Updated: 2024-08-05T11:37:11.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zurmo 3.2.4 has XSS via an admin's use of the name parameter in the reports section, aka the app/index.php/reports/default/details?id=1 URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/security-breachlock/CVE-2018-19506/blob/master/Zurmo_PS.pdf
CVE ID: CVE-2018-19507 State: PUBLISHED Published: 2018-12-19T19:00:00 Last Updated: 2024-08-05T11:37:11.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMSimple 4.7.5 has XSS via an admin's use of a ?file=config&action=array URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/security-breachlock/CVE-2018-19507/blob/master/Persistent-XSS.pdf
CVE ID: CVE-2018-19508 State: PUBLISHED Published: 2018-12-19T19:00:00 Last Updated: 2024-08-05T11:37:11.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMSimple 4.7.5 has XSS via an admin's upload of an SVG file at a ?userfiles&subdir=userfiles/images/flags/ URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/security-breachlock/CVE-2018-19508/blob/master/Persistent-XSS.pdf
CVE ID: CVE-2018-19509 State: PUBLISHED Published: 2019-03-17T21:49:26 Last Updated: 2024-08-05T11:37:11.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: wg7.php in Webgalamb 7.0 makes opportunistic calls to htmlspecialchars() instead of using a templating engine with proper contextual encoding. Because it is possible to insert arbitrary strings into the database, any JavaScript could be executed by the administrator, leading to XSS. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151017/Webgalamb-Information-Disclosure-XSS-CSRF-SQL-Injection.html - http://seclists.org/fulldisclosure/2019/Jan/15
CVE ID: CVE-2018-19510 State: PUBLISHED Published: 2019-03-17T21:53:19 Last Updated: 2024-08-05T11:37:11.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: subscriber.php in Webgalamb through 7.0 is vulnerable to SQL injection via the Client-IP HTTP request header. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151017/Webgalamb-Information-Disclosure-XSS-CSRF-SQL-Injection.html - http://seclists.org/fulldisclosure/2019/Jan/15
CVE ID: CVE-2018-19511 State: PUBLISHED Published: 2019-03-17T21:54:27 Last Updated: 2024-08-05T11:37:11.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: wg7.php in Webgalamb 7.0 lacks security measures to prevent CSRF attacks, as demonstrated by wg7.php?options=1 to change the administrator password. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151017/Webgalamb-Information-Disclosure-XSS-CSRF-SQL-Injection.html - http://seclists.org/fulldisclosure/2019/Jan/15
CVE ID: CVE-2018-19512 State: PUBLISHED Published: 2019-03-17T21:58:48 Last Updated: 2024-08-05T11:37:11.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Webgalamb through 7.0, a system/ajax.php "wgmfile restore" directory traversal vulnerability could lead to arbitrary code execution by authenticated administrator users, because PHP files are restored under the document root directory. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151017/Webgalamb-Information-Disclosure-XSS-CSRF-SQL-Injection.html - http://seclists.org/fulldisclosure/2019/Jan/15
CVE ID: CVE-2018-19513 State: PUBLISHED Published: 2019-03-17T22:02:20 Last Updated: 2024-08-05T11:37:11.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Webgalamb through 7.0, log files are exposed to the internet with predictable files/logs/sql_error_log/YYYY-MM-DD-sql_error_log.log filenames. The log file could contain sensitive client data (email addresses) and also facilitates exploitation of SQL injection errors. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151017/Webgalamb-Information-Disclosure-XSS-CSRF-SQL-Injection.html - http://seclists.org/fulldisclosure/2019/Jan/15
CVE ID: CVE-2018-19514 State: PUBLISHED Published: 2019-03-17T22:06:16 Last Updated: 2024-08-05T11:37:11.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Webgalamb through 7.0, an arbitrary code execution vulnerability could be exploited remotely without authentication. Exploitation requires authentication bypass to access administrative functions of the site to upload a crafted CSV file with a malicious payload that becomes part of a PHP eval() expression in the subscriber.php file. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151017/Webgalamb-Information-Disclosure-XSS-CSRF-SQL-Injection.html - http://seclists.org/f
acketstormsecurity.com/files/151017/Webgalamb-Information-Disclosure-XSS-CSRF-SQL-Injection.html - http://seclists.org/fulldisclosure/2019/Jan/15
CVE ID: CVE-2018-19515 State: PUBLISHED Published: 2019-03-17T18:32:11 Last Updated: 2024-08-05T11:37:11.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Webgalamb through 7.0, system/ajax.php functionality is supposed to be available only to the administrator. However, by using one of the bgsend, atment_sddd1xGz, or xls_bgimport query parameters, most of these methods become available to unauthenticated users. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151017/Webgalamb-Information-Disclosure-XSS-CSRF-SQL-Injection.html - https://seclists.org/fulldisclosure/2019/Jan/15
CVE ID: CVE-2018-19516 State: PUBLISHED Published: 2020-03-12T20:27:43 Last Updated: 2024-08-05T11:37:11.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: messagepartthemes/default/defaultrenderer.cpp in messagelib in KDE Applications before 18.12.0 does not properly restrict the handling of an http-equiv="REFRESH" value. Additional Analyst Notes: - CVE Program Container: References: - https://cgit.kde.org/messagelib.git/commit/messageviewer/src/messagepartthemes/default/defaultrenderer.cpp?id=34765909cdf8e55402a8567b48fb288839c61612
CVE ID: CVE-2018-19517 State: PUBLISHED Published: 2018-11-24T18:00:00Z Last Updated: 2024-09-16T19:14:15.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in sysstat 12.1.1. The remap_struct function in sa_common.c has an out-of-bounds read during a memset call, as demonstrated by sadf. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sysstat/sysstat/issues/199
CVE ID: CVE-2018-19518 State: PUBLISHED Published: 2018-11-25T10:00:00 Last Updated: 2024-08-05T11:37:11.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_rimap function in c-client/imap4r1.c and the tcp_aopen function in osdep/unix/tcp_unix.c) without preventing argument injection, which might allow remote attackers to execute arbitrary OS commands if the IMAP server name is untrusted input (e.g., entered by a user of a web application) and if rsh has been replaced by a program with different argument semantics. For example, if rs
er of a web application) and if rsh has been replaced by a program with different argument semantics. For example, if rsh is a link to ssh (as seen on Debian and Ubuntu systems), then the attack can use an IMAP server name containing a "-oProxyCommand" argument. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=77160 - https://www.exploit-db.com/exploits/45914/ - https://lists.debian.org/debian-lts-announce/2019/03/msg00001.html - https://security.netapp.com/advisory/ntap-20181221-0004/ - http://www.securitytracker.com/id/1042157 - https://www.debian.org/security/2018/dsa-4353 - https://github.com/Bo0oM/PHP_imap_open_exploit/blob/master/exploit.
57 - https://www.debian.org/security/2018/dsa-4353 - https://github.com/Bo0oM/PHP_imap_open_exploit/blob/master/exploit.php - https://bugs.debian.org/913835 - https://www.openwall.com/lists/oss-security/2018/11/22/3 - https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=e5bfea64c81ae34816479bb05d17cdffe45adddb - http://www.securityfocus.com/bid/106018 - https://bugs.php.net/bug.php?id=76428 - https://bugs.debian.org/913775 - https://bugs.debian.org/913836 - https://antichat.com/threads/463395/#post-4254681 - https://bugs.php.net/bug.php?id=77153 - https://lists.debian.org/debian-lts-announce/2018/12/msg00006.html - https://usn.ubuntu.com/4160-1/ - https://security.gentoo.org/glsa/202003-57 - ht
an-lts-announce/2018/12/msg00006.html - https://usn.ubuntu.com/4160-1/ - https://security.gentoo.org/glsa/202003-57 - https://lists.debian.org/debian-lts-announce/2021/12/msg00031.html
CVE ID: CVE-2018-19519 State: PUBLISHED Published: 2018-11-25T20:00:00 Last Updated: 2024-08-05T11:37:11.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106098 - https://github.com/zyingp/temp/blob/master/tcpdump.md - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R2UDPOSGVJQIYC33SQBXMDXHH4QDSDMU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedo
/message/R2UDPOSGVJQIYC33SQBXMDXHH4QDSDMU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNYXF3IY2X65IOD422SA6EQUULSGW7FN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN/ - https://access.redhat.com/errata/RHSA-2019:3976 - https://usn.ubuntu.com/4252-2/ - https://usn.ubuntu.com/4252-1/ - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516
CVE ID: CVE-2018-19520 State: PUBLISHED Published: 2018-11-25T20:00:00 Last Updated: 2024-08-05T11:37:11.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SDCMS 1.6 with PHP 5.x. app/admin/controller/themecontroller.php uses a check_bad function in an attempt to block certain PHP functions such as eval, but does not prevent use of preg_replace 'e' calls, allowing users to execute arbitrary code by leveraging access to admin template management. Additional Analyst Notes: - CVE Program Container: References: - https://blog.whiterabbitxyj.com/cve/SDCMS_1.6_code_execution.doc - https://github.com/WhiteRabbitc/WhiteRabbitc.github.io/blob/master/cve/SDCMS_1
yj.com/cve/SDCMS_1.6_code_execution.doc - https://github.com/WhiteRabbitc/WhiteRabbitc.github.io/blob/master/cve/SDCMS_1.6_code_execution.doc
CVE ID: CVE-2018-19522 State: PUBLISHED Published: 2018-12-18T16:00:00 Last Updated: 2024-08-05T11:37:11.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: DriverAgent 2.2015.7.14, which includes DrvAgent64.sys 1.0.0.1, allows a user to send an IOCTL (0x800020F4) with a buffer containing user defined content. The driver's subroutine will execute a wrmsr instruction with the user's buffer for partial input. Additional Analyst Notes: - CVE Program Container: References: - https://downwithup.github.io/CVEPosts.html
CVE ID: CVE-2018-19523 State: PUBLISHED Published: 2019-01-03T19:00:00 Last Updated: 2024-08-05T11:37:11.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: DriverAgent 2.2015.7.14, which includes DrvAgent64.sys 1.0.0.1, allows a user to send an IOCTL (0x80002068) with a user defined buffer size. If the size of the buffer is less than 512 bytes, then the driver will overwrite the next pool header if there is one next to the user buffer's pool. Additional Analyst Notes: - CVE Program Container: References: - https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86ahttps://downwithup.github.io/CVEPosts.html
CVE ID: CVE-2018-19524 State: PUBLISHED Published: 2019-03-17T18:38:49 Last Updated: 2024-08-05T11:37:11.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Shenzhen Skyworth DT741 Converged Intelligent Terminal (G/EPON+IPTV) SDOTBGN1, DT721-cb SDOTBGN1, and DT741-cb SDOTBGN1 devices. A long password to the Web_passwd function allows remote attackers to cause a denial of service (segmentation fault) or achieve unauthenticated remote code execution because of control of registers S0 through S4 and T4 through T7. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2019/Feb/21 - https://www.exploit-db.com/exploits/
: - CVE Program Container: References: - https://seclists.org/bugtraq/2019/Feb/21 - https://www.exploit-db.com/exploits/46358/ - https://s3curityb3ast.github.io/KSA-Dev-001.md - http://packetstormsecurity.com/files/151608/Skyworth-GPON-HomeGateways-Optical-Network-Stack-Overflow.html - http://seclists.org/fulldisclosure/2019/Feb/30 - https://www.breakthesec.com/2019/02/cve-2018-19524-stack-overflow-in.html
CVE ID: CVE-2018-19525 State: PUBLISHED Published: 2019-03-17T18:43:37 Last Updated: 2024-08-05T11:37:11.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Systrome ISG-600C, ISG-600H, and ISG-800W 1.1-R2.1_TRUNK-20180914.bin devices. There is CSRF via /ui/?g=obj_keywords_add and /ui/?g=obj_keywords_addsave with resultant XSS because of a lack of csrf token validation. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151647/SYSTORME-ISG-Cross-Site-Request-Forgery.html - http://seclists.org/fulldisclosure/2019/Feb/31 - https://s3curityb3ast.github.io/KSA-Dev-002.md - https://www.breakthesec.com/2019/0
sts.org/fulldisclosure/2019/Feb/31 - https://s3curityb3ast.github.io/KSA-Dev-002.md - https://www.breakthesec.com/2019/02/cve-2018-19525-account-takeover-via.html
CVE ID: CVE-2018-19527 State: PUBLISHED Published: 2018-11-29T23:00:00 Last Updated: 2024-08-05T11:37:11.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: i4 assistant 7.85 allows XSS via a crafted machine name field within iOS settings. Additional Analyst Notes: - CVE Program Container: References: - https://www.mimaz.org/pocs/i4xss.mp4
CVE ID: CVE-2018-19528 State: PUBLISHED Published: 2018-11-26T02:00:00 Last Updated: 2024-08-05T11:37:11.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-WR886N 7.0 1.1.0 devices allow remote attackers to cause a denial of service (Tlb Load Exception) via crafted DNS packets to port 53/udp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/dns_request_buff_overflow/README.md
CVE ID: CVE-2018-19530 State: PUBLISHED Published: 2018-11-26T02:00:00 Last Updated: 2024-08-05T11:37:11.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTTL (aka Hyper-Text Template Language) through 1.0.11 allows remote command execution because the decodeXml function uses XStream unsafely when configured with an xml.codec=httl.spi.codecs.XstreamCodec setting. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/httl/httl/issues/225
CVE ID: CVE-2018-19531 State: PUBLISHED Published: 2018-11-26T02:00:00 Last Updated: 2024-08-05T11:37:11.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTTL (aka Hyper-Text Template Language) through 1.0.11 allows remote command execution because the decodeXml function uses java.beans.XMLEncoder unsafely when configured without an xml.codec= setting. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/httl/httl/issues/224
CVE ID: CVE-2018-19532 State: PUBLISHED Published: 2018-11-26T02:00:00 Last Updated: 2024-08-05T11:37:11.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference vulnerability exists in the function PdfTranslator::setTarget() in pdftranslator.cpp of PoDoFo 0.9.6, while creating the PdfXObject, as demonstrated by podofoimpose. It allows an attacker to cause Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/podofo/tickets/32/ - https://research.loginsoft.com/bugs/null-pointer-dereference-vulnerability-in-pdftranslatorsettarget-podofo-0-9-6/