Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-19070 State: PUBLISHED Published: 2018-11-07T18:00:00 Last Updated: 2024-08-05T11:30:04.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. They allow remote attackers to execute arbitrary OS commands via shell metacharacters in the usrName parameter of a CGIProxy.fcgi addAccount action. Additional Analyst Notes: - CVE Program Container: References: - https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt
CVE ID: CVE-2018-19071 State: PUBLISHED Published: 2018-11-07T18:00:00 Last Updated: 2024-08-05T11:30:04.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. /mnt/mtd/boot.sh has 0777 permissions, allowing local users to control the commands executed at system start-up. Additional Analyst Notes: - CVE Program Container: References: - https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt
CVE ID: CVE-2018-19072 State: PUBLISHED Published: 2018-11-07T18:00:00 Last Updated: 2024-08-05T11:30:04.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. /mnt/mtd/app has 0777 permissions, allowing local users to replace an archive file (within that directory) to control what is extracted to RAM at boot time. Additional Analyst Notes: - CVE Program Container: References: - https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt
CVE ID: CVE-2018-19073 State: PUBLISHED Published: 2018-11-07T18:00:00 Last Updated: 2024-08-05T11:30:03.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. They allow attackers to execute arbitrary OS commands via shell metacharacters in the modelName, by leveraging /mnt/mtd/app/config/ProductConfig.xml write access. Additional Analyst Notes: - CVE Program Container: References: - https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt
CVE ID: CVE-2018-19074 State: PUBLISHED Published: 2018-11-07T18:00:00 Last Updated: 2024-08-05T11:30:04.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The firewall has no effect except for blocking port 443 and partially blocking port 88. Additional Analyst Notes: - CVE Program Container: References: - https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt
CVE ID: CVE-2018-19075 State: PUBLISHED Published: 2018-11-07T18:00:00 Last Updated: 2024-08-05T11:30:04.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The firewall feature makes it easier for remote attackers to ascertain credentials and firewall rules because invalid credentials lead to error -2, whereas rule-based blocking leads to error -8. Additional Analyst Notes: - CVE Program Container: References: - https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabiliti
yst Notes: - CVE Program Container: References: - https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt
CVE ID: CVE-2018-19076 State: PUBLISHED Published: 2018-11-07T18:00:00 Last Updated: 2024-08-05T11:30:04.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The FTP and RTSP services make it easier for attackers to conduct brute-force authentication attacks, because failed-authentication limits apply only to HTTP (not FTP or RTSP). Additional Analyst Notes: - CVE Program Container: References: - https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt
CVE ID: CVE-2018-19077 State: PUBLISHED Published: 2018-11-07T18:00:00 Last Updated: 2024-08-05T11:30:04.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. RtspServer allows remote attackers to cause a denial of service (daemon hang or restart) via a negative integer in the RTSP Content-Length header. Additional Analyst Notes: - CVE Program Container: References: - https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt
CVE ID: CVE-2018-19078 State: PUBLISHED Published: 2018-11-07T18:00:00 Last Updated: 2024-08-05T11:30:03.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The response to an ONVIF media GetStreamUri request contains the administrator username and password. Additional Analyst Notes: - CVE Program Container: References: - https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt
CVE ID: CVE-2018-19079 State: PUBLISHED Published: 2018-11-07T18:00:00 Last Updated: 2024-08-05T11:30:03.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SystemReboot method allows unauthenticated reboot. Additional Analyst Notes: - CVE Program Container: References: - https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt
CVE ID: CVE-2018-19080 State: PUBLISHED Published: 2018-11-07T18:00:00 Last Updated: 2024-08-05T11:30:03.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetHostname method allows unauthenticated persistent XSS. Additional Analyst Notes: - CVE Program Container: References: - https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt
CVE ID: CVE-2018-19081 State: PUBLISHED Published: 2018-11-07T18:00:00 Last Updated: 2024-08-05T11:30:04.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetDNS method allows remote attackers to execute arbitrary OS commands via the IPv4Address field. Additional Analyst Notes: - CVE Program Container: References: - https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt
CVE ID: CVE-2018-19082 State: PUBLISHED Published: 2018-11-07T18:00:00 Last Updated: 2024-08-05T11:30:04.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetDNS method allows remote attackers to conduct stack-based buffer overflow attacks via the IPv4Address field. Additional Analyst Notes: - CVE Program Container: References: - https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt
CVE ID: CVE-2018-19083 State: PUBLISHED Published: 2018-11-07T18:00:00 Last Updated: 2024-08-05T11:30:04.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: WeCenter 3.2.0 through 3.2.2 has XSS in the views/default/question/index.tpl.html htmlspecialchars_decode function via the /?/publish/ajax/publish_question/ question_content parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.iwantacve.cn/index.php/archives/76/
CVE ID: CVE-2018-19084 State: PUBLISHED Published: 2018-11-10T03:00:00 Last Updated: 2024-08-05T11:30:03.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E05C with a size larger than 8 bytes. This can lead to denial of service or code execution with root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://downwithup.github.io/CVEPosts.html
CVE ID: CVE-2018-19085 State: PUBLISHED Published: 2018-11-10T03:00:00 Last Updated: 2024-08-05T11:30:04.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E048 with a size larger than 8 bytes. This can lead to denial of service or code execution with root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://downwithup.github.io/CVEPosts.html
CVE ID: CVE-2018-19086 State: PUBLISHED Published: 2018-11-10T03:00:00 Last Updated: 2024-08-05T11:30:03.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E040 with a size larger than 8 bytes. This can lead to denial of service or code execution with root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://downwithup.github.io/CVEPosts.html
CVE ID: CVE-2018-19087 State: PUBLISHED Published: 2018-11-10T03:00:00 Last Updated: 2024-08-05T11:30:04.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E044 with a size larger than 8 bytes. This can lead to denial of service or code execution with root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://downwithup.github.io/CVEPosts.html
CVE ID: CVE-2018-19089 State: PUBLISHED Published: 2018-11-07T19:00:00 Last Updated: 2024-08-05T11:30:04.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: tianti 2.3 has stored XSS in the userlist module via the tianti-module-admin/user/ajax/save_role name parameter, which is mishandled in tianti-module-admin\src\main\webapp\WEB-INF\views\user\user_list.jsp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xujeff/tianti/issues/27
CVE ID: CVE-2018-19090 State: PUBLISHED Published: 2018-11-07T19:00:00 Last Updated: 2024-08-05T11:30:03.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: tianti 2.3 has stored XSS in the article management module via an article title. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xujeff/tianti/issues/27
CVE ID: CVE-2018-19091 State: PUBLISHED Published: 2018-11-07T19:00:00 Last Updated: 2024-08-05T11:30:03.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: tianti 2.3 has reflected XSS in the user management module via the tianti-module-admin/user/list userName parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xujeff/tianti/issues/27
CVE ID: CVE-2018-19092 State: PUBLISHED Published: 2018-11-07T19:00:00 Last Updated: 2024-08-05T11:30:04.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in YzmCMS v5.2. It has XSS via a search/index/archives/pubtime/ query string, as demonstrated by the search/index/archives/pubtime/1526387722/page/1.html URI. NOTE: this does not obtain a user's cookie. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yzmcms/yzmcms/issues/7
CVE ID: CVE-2018-19093 State: PUBLISHED Published: 2018-11-07T19:00:00 Last Updated: 2024-08-05T11:30:03.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in libIEC61850 v1.3. It is a SEGV in ControlObjectClient_setCommandTerminationHandler in client/client_control.c. NOTE: the software maintainer disputes this because it requires incorrect usage of the client_example_control program Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/mz-automation/libiec61850/issues/84 - https://github.com/fouzhe/security/tree/master/libiec61850#segv-in-function-controlobjectclient_setcommandterminationhandler
CVE ID: CVE-2018-19104 State: PUBLISHED Published: 2018-11-08T08:00:00 Last Updated: 2024-08-05T11:30:03.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: In BageCMS 3.1.3, upload/index.php has a CSRF vulnerability that can be used to upload arbitrary files and get server privileges. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bagesoft/bagecms/issues/3
CVE ID: CVE-2018-19105 State: PUBLISHED Published: 2018-11-08T08:00:00 Last Updated: 2024-08-05T11:30:03.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreCAD 2.1.3 allows remote attackers to cause a denial of service (0x89C04589 write access violation and application crash) or possibly have unspecified other impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2018/11/crashing-librecad-213.html - https://lists.debian.org/debian-lts-announce/2019/05/msg00005.html
CVE ID: CVE-2018-19106 State: PUBLISHED Published: 2019-02-20T01:00:00 Last Updated: 2024-08-05T11:30:03.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Avi Vantage before 17.2.13 uses an invalid URL encoding during a redirect operation, aka AV-33959. Additional Analyst Notes: - CVE Program Container: References: - https://avinetworks.com/docs/17.2/release-notes/
CVE ID: CVE-2018-19107 State: PUBLISHED Published: 2018-11-08T00:00:00 Last Updated: 2024-08-05T11:30:03.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp (called from psdimage.cpp in the PSD image reader) may suffer from a denial of service (heap-based buffer over-read) caused by an integer overflow via a crafted PSD image file. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2019/02/msg00038.html - https://github.com/Exiv2/exiv2/issues/427 - https://github.com/Exiv2/exiv2/pull/518 - https://usn.ubuntu.com/4056-1/ - https://access.redhat.com/errata/RHSA-2019:2101
ps://github.com/Exiv2/exiv2/pull/518 - https://usn.ubuntu.com/4056-1/ - https://access.redhat.com/errata/RHSA-2019:2101 - https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html
CVE ID: CVE-2018-19108 State: PUBLISHED Published: 2018-11-08T00:00:00 Last Updated: 2024-08-05T11:30:04.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may suffer from a denial of service (infinite loop) caused by an integer overflow via a crafted PSD image file. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2019/02/msg00038.html - https://github.com/Exiv2/exiv2/issues/426 - https://github.com/Exiv2/exiv2/pull/518 - https://usn.ubuntu.com/4056-1/ - https://access.redhat.com/errata/RHSA-2019:2101 - http://lists.opensuse.org/opens
518 - https://usn.ubuntu.com/4056-1/ - https://access.redhat.com/errata/RHSA-2019:2101 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html - https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html
CVE ID: CVE-2018-19109 State: PUBLISHED Published: 2018-11-08T08:00:00 Last Updated: 2024-08-05T11:30:04.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-module-admin/cms/column/list directly to read the column list page or edit a column. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xujeff/tianti/issues/29
CVE ID: CVE-2018-19110 State: PUBLISHED Published: 2018-11-08T08:00:00 Last Updated: 2024-08-05T11:30:04.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: The skin-management feature in tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-module-admin/user/skin/list directly because controller\usercontroller.java maps a /skin/list request to the function skinList, and lacks an authorization check. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xujeff/tianti/issues/29
CVE ID: CVE-2018-19111 State: PUBLISHED Published: 2018-11-08T08:00:00 Last Updated: 2024-08-05T11:30:04.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Google Cardboard application 1.8 for Android and 1.2 for iOS sends potentially private cleartext information to the Unity 3D Stats web site, as demonstrated by device make, model, and OS. Additional Analyst Notes: - CVE Program Container: References: - https://www.info-sec.ca/advisories/Google-Cardboard.html
CVE ID: CVE-2018-19113 State: PUBLISHED Published: 2019-04-01T20:09:53 Last Updated: 2024-08-05T11:30:04.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Pronestor PNHM (aka Health Monitoring or HealthMonitor) add-in before 8.1.13.0 for Outlook has "BUILTIN\Users:(I)(F)" permissions for the "%PROGRAMFILES(X86)%\proNestor\Outlook add-in for Pronestor\PronestorHealthMonitor.exe" file, which allows local users to gain privileges via a Trojan horse PronestorHealthMonitor.exe file. Additional Analyst Notes: - CVE Program Container: References: - https://www.pronestor.com - https://gist.github.com/povlteksttv/8f990e11576e1e90e8fb61acf8646d28 - http://packetstormsecurity.com/file
onestor.com - https://gist.github.com/povlteksttv/8f990e11576e1e90e8fb61acf8646d28 - http://packetstormsecurity.com/files/153275/Pronestor-Health-Monitoring-Privilege-Escalation.html
CVE ID: CVE-2018-19114 State: PUBLISHED Published: 2018-11-08T18:00:00Z Last Updated: 2024-09-16T20:32:01.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MinDoc through v1.0.2. It allows attackers to gain privileges by uploading an image file with contents that represent an admin session, and then sending a Cookie: header with a mindoc_id value containing the relative pathname of this uploaded file. For example, the mindoc_id (aka session ID) could be of the form aa/../../uploads/blog/201811/attach_#.jpg where '#' is a hex value displayed in the upload field of a manage/blogs/edit/ screen. Additional Analyst Notes: - CVE Program Container: Reference
splayed in the upload field of a manage/blogs/edit/ screen. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lifei6671/mindoc/issues/384
CVE ID: CVE-2018-19115 State: PUBLISHED Published: 2018-11-08T20:00:00 Last Updated: 2024-08-05T11:30:04.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: keepalived before 2.0.7 has a heap-based buffer overflow when parsing HTTP status codes resulting in DoS or possibly unspecified other impact, because extract_status_code in lib/html.c has no validation of the status code and instead writes an unlimited amount of data to the heap. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201903-01 - https://lists.debian.org/debian-lts-announce/2018/11/msg00034.html - https://bugzilla.suse.com/show_bug.cgi?id=1015141 - https://github.com
n.org/debian-lts-announce/2018/11/msg00034.html - https://bugzilla.suse.com/show_bug.cgi?id=1015141 - https://github.com/acassen/keepalived/pull/961/commits/f28015671a4b04785859d1b4b1327b367b6a10e9 - https://github.com/acassen/keepalived/pull/961 - https://access.redhat.com/errata/RHSA-2019:0022 - https://usn.ubuntu.com/3995-1/ - https://usn.ubuntu.com/3995-2/ - https://access.redhat.com/errata/RHSA-2019:1792 - https://access.redhat.com/errata/RHSA-2019:1945
CVE ID: CVE-2018-19118 State: PUBLISHED Published: 2018-12-13T19:00:00 Last Updated: 2024-08-05T11:30:04.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine ADAudit before 5.1 build 5120 allows remote attackers to cause a denial of service (stack-based buffer overflow) via the 'Domain Name' field when adding a new domain. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/active-directory-audit/adaudit-plus-release-notes.html
CVE ID: CVE-2018-19120 State: PUBLISHED Published: 2018-11-29T21:00:00 Last Updated: 2024-08-05T11:30:04.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTML thumbnailer plugin in KDE Applications before 18.12.0 allows attackers to trigger outbound TCP connections to arbitrary IP addresses, leading to disclosure of the source IP address. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1649420 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CWRCGXLPJHM4OFD66BINH2FIMYHRCRKF/
CVE ID: CVE-2018-19121 State: PUBLISHED Published: 2018-11-09T11:00:00 Last Updated: 2024-08-05T11:30:04.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in libIEC61850 v1.3. It is a SEGV in Ethernet_receivePacket in ethernet_bsd.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fouzhe/security/tree/master/libiec61850#segv-in-function-ethernet_receivepacket - https://github.com/mz-automation/libiec61850/issues/85
CVE ID: CVE-2018-19122 State: PUBLISHED Published: 2018-11-09T11:00:00 Last Updated: 2024-08-05T11:30:03.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in libIEC61850 v1.3. It is a NULL pointer dereference in Ethernet_sendPacket in ethernet_bsd.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fouzhe/security/tree/master/libiec61850#segv-in-function-ethernet_sendpacket - https://github.com/mz-automation/libiec61850/issues/86
CVE ID: CVE-2018-19124 State: PUBLISHED Published: 2018-11-09T11:00:00 Last Updated: 2024-08-05T11:30:04.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 on Windows allows remote attackers to write to arbitrary image files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PrestaShop/PrestaShop/pull/11286 - https://github.com/PrestaShop/PrestaShop/pull/11285 - http://build.prestashop.com/news/prestashop-1-7-4-4-1-6-1-23-maintenance-releases/
CVE ID: CVE-2018-19125 State: PUBLISHED Published: 2018-11-09T11:00:00 Last Updated: 2024-08-05T11:30:03.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to delete an image directory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PrestaShop/PrestaShop/pull/11286 - https://github.com/PrestaShop/PrestaShop/pull/11285 - https://www.exploit-db.com/exploits/45964/ - http://build.prestashop.com/news/prestashop-1-7-4-4-1-6-1-23-maintenance-releases/
CVE ID: CVE-2018-19126 State: PUBLISHED Published: 2018-11-09T11:00:00 Last Updated: 2024-08-05T11:30:04.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to execute arbitrary code via a file upload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PrestaShop/PrestaShop/pull/11286 - https://github.com/PrestaShop/PrestaShop/pull/11285 - https://www.exploit-db.com/exploits/45964/ - http://build.prestashop.com/news/prestashop-1-7-4-4-1-6-1-23-maintenance-releases/